Re: [PATCH v19] GSSAPI encryption support

Stephen Frost <sfrost(at)snowman(dot)net> writes:

> Greetings Robbie,
>
> * Dmitry Dolgov (9erthalion6(at)gmail(dot)com) wrote:
>> > On Tue, Oct 2, 2018 at 11:12 PM Robbie Harwood <rharwood(at)redhat(dot)com> wrote:
>> >
>> > Michael Paquier <michael(at)paquier(dot)xyz> writes:
>> >
>> > > On Mon, Aug 06, 2018 at 05:23:28PM -0400, Robbie Harwood wrote:
>> > >> If you're in a position where you're using Kerberos (or most other
>> > >> things from the GSSAPI) for authentication, the encryption comes at
>> > >> little to no additional setup cost. And then you get all the security
>> > >> benefits outlined in the docs changes.
>> > >
>> > > Please note that the last patch set does not apply anymore, so I have
>> > > moved it to CF 2018-11 and marked it as waiting on author.
>> >
>> > Indeed. Please find v19 attached. It's just a rebase; no architecture
>> > changes.
>>
>> Unfortunately, patch needs another rebase, could you do this? In the meantime
>> I'll move it to the next CF.
>
> This patch needs a few minor changes to get it back to working, but I'm
> happy to say that with those changes, it seems to be working rather well
> for me.

Thanks Stephen!

Dmitry, I will make an update (and address Stephen's feedback) hopefully
soon.

Thanks,
--Robbie